CVE-2021-2122

Related Files

Chrome V8 JIT XOR Arbitrary Code Execution

Posted Dec 14, 2023

Authored by R3tro74 | Site github.com

Chrome V8 proof of concept exploit for CVE-2021-21220. The specific flaw exists within the implementation of XOR operation when executed within JIT compiled code.

tags | exploit, proof of concept

advisories | CVE-2021-21220

SHA-256 | 4a0c5ace29bab9077fd3cb6f30e1b337ebb1207166906d4dc66f459257476092

Download | Favorite | View

Debian Security Advisory 4911-1

Posted May 28, 2021

Authored by Debian | Site debian.org

Debian Linux Security Advisory 4911-1 - Several vulnerabilities have been discovered in the chromium web browser.

tags | advisory, web, vulnerability

systems | linux, debian

advisories | CVE-2021-21227, CVE-2021-21228, CVE-2021-21229, CVE-2021-21230, CVE-2021-21231, CVE-2021-21232, CVE-2021-21233

SHA-256 | 9deddc747716a9eff5ebd513469e72f12768fb8e205c29e0ae517708389745cb

Download | Favorite | View

Google Chrome XOR Typer Out-Of-Bounds Access / Remote Code Execution

Posted May 3, 2021

Authored by Niklas Baumstark, Grant Willcox, Rajvardhan Agarwal, Bruno Keith | Site metasploit.com

This Metasploit module exploits an issue in the V8 engine on x86_x64 builds of Google Chrome versions prior to 89.0.4389.128/90.0.4430.72 when handling XOR operations in JIT'd JavaScript code. Successful exploitation allows an attacker to execute arbitrary code within the context of the V8 process. As the V8 process is normally sandboxed in the default configuration of Google Chrome, the browser must be run with the --no-sandbox option for the payload to work correctly.

tags | exploit, arbitrary, javascript

advisories | CVE-2021-21220

SHA-256 | 021951718048ffe0b71a7648ba64e0929b63f860f2b0a3b5424af17523e26274

Download | Favorite | View

Ubuntu Security Notice USN-4716-1

Posted Feb 1, 2021

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 4716-1 - Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.23 in Ubuntu 20.04 LTS and Ubuntu 20.10. Ubuntu 16.04 LTS and Ubuntu 18.04 LTS have been updated to MySQL 5.7.33. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes. Various other issues were also addressed.

tags | advisory

systems | linux, ubuntu

advisories | CVE-2021-2002, CVE-2021-2021, CVE-2021-2032, CVE-2021-2048, CVE-2021-2061, CVE-2021-2076, CVE-2021-2122

SHA-256 | 3ed62d3245642529217bb79cf07c6580a1fd5c2cba0cf7edad2b1fede97c7f24

Download | Favorite | View